Overview

overview

8

Static

static

dcefece1d9...75.exe

windows7-x64

8

dcefece1d9...75.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dcefece1d932e8465f5f1463bda712817b56cbfbc546c9043ca1f94fe6c67475

  • Size

    26KB

  • Sample

    221124-p8rdsahh4x

  • MD5

    dfa35b623474c00c8bec67e0b7083f1e

  • SHA1

    f61e6cbe503c61e5e9365bee280f42ed74ae68a7

  • SHA256

    dcefece1d932e8465f5f1463bda712817b56cbfbc546c9043ca1f94fe6c67475

  • SHA512

    e825fb9ef5ec4fe31da1cd4571b065087153c163781759e51a4ef582c73f095802012b8cbdc6fb90802a8ba82125cbf25f25b7632276255906f6290d36ac6747

  • SSDEEP

    768:h2BOSJ9OeJp5njhsErEsiUvcWRgj5OU01uWGUekpNE:hslX1sErlzcDlOxQWGU

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      dcefece1d932e8465f5f1463bda712817b56cbfbc546c9043ca1f94fe6c67475

    • Size

      26KB

    • MD5

      dfa35b623474c00c8bec67e0b7083f1e

    • SHA1

      f61e6cbe503c61e5e9365bee280f42ed74ae68a7

    • SHA256

      dcefece1d932e8465f5f1463bda712817b56cbfbc546c9043ca1f94fe6c67475

    • SHA512

      e825fb9ef5ec4fe31da1cd4571b065087153c163781759e51a4ef582c73f095802012b8cbdc6fb90802a8ba82125cbf25f25b7632276255906f6290d36ac6747

    • SSDEEP

      768:h2BOSJ9OeJp5njhsErEsiUvcWRgj5OU01uWGUekpNE:hslX1sErlzcDlOxQWGU

    Score
    8/10
    discoveryexploit

    • Possible privilege escalation attempt

      exploit

    • Deletes itself

    • Modifies file permissions

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks